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CLAIMS: 

1. An electronic voting method comprising the step of using a fair blind signature 
scheme to obtain a digital signature (y f ) of a data signal (jc,) comprising a voter's vote 

5 (v,). 

2. The electronic voting method of claim 1 , wherein the fair blind signature scheme 
is a threshold fair blind signature scheme in which the digital signature is obtained from 
a sub-set of a group of servers, the group of servers containing n servers and the sub- 

10 set containing t servers, where t < n. 

3. The electronic voting method of claim 1 or 2, wherein the data signal (*,) 
corresponds to the voter's vote (v,) encrypted according to a first encryption scheme 
{Em), said first encryption scheme being the encryption scheme of a first mix-net (zw), 

15 and the method further comprises the step of applying the decryption scheme (D m ) 
inverse to said first encryption scheme to said data signal (*,) whereby to retrieve the 
voter's vote (v,). 

4. The electronic voting method of claim 3, and comprising the steps of: 

20 receiving, in a first order, a batch of encrypted data signals, each encrypted 

data signal (c,) comprising data encrypted according to a second encryption scheme 
(e m ) said data including a respective data signal (x f ); 

retrieving each data signal (*,) from the respective encrypted data signal (c f ) in 
said batch by applying a decryption scheme (Dm) inverse to said second encryption 
25 scheme (e w ); and 

outputting the retrieved data signals (*,) for said batch in a different order from 
said first order. 

5. The electronic voting method of claim 4, wherein said second encryption 
30 scheme is the encryption scheme of a second mix-net (Afl. 

6. The electronic voting method of claim 5, and comprising the step of detecting 
irregularities in the voting process, said step of detecting irregularities comprising 
verifying that the ballots to be counted do not contain duplicated data-pairs, wherein a 

35 data-pair corresponds to one of said data signals and the digital signature thereof. 
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7. The electronic voting method of claim 5, and comprising the step of detecting 
irregularities in the voting process, wherein the step of detecting irregularities 
comprises checking the validity of the digital signatures in the ballots to be counted. 

5 

8. The electronic voting method of claim 5, and comprising the step of detecting 
irregularities in the voting process, wherein the step of detecting irregularities 
comprises checking that there is no overlap between the ballots to be counted and 
entries in a revocation list 

10 

9. An electronic voting method according to any previous claim and comprising the 
steps of: 

receiving said data signal (*,) for digital signature according to said fair blind 
signature scheme at a server module (as), said data signal (*,) comprising a vote (v,) 
15 selected by a voter (V/), said vote (v,) being encrypted according to said first encryption 
scheme (e tm ), blinded according to said fair blind signature scheme and digitally signed 
according to a digital signature scheme of said voter; 

verifying, by said server module (as), that the digital signature (s f ) in the 
received signal is valid; 

20 in the case where the verifying step confirms that the digital signature in the 

signal received by said server module (as) is valid, said server module (as) digitally 
signs the blinded encrypted vote (<?,) and outputs the digitally-signed message (s M fo)); 

unblinding the digitally-signed message (Sas(^)) to yield said digital signature 
(#) of the data signal (jc,); 
25 encrypting said data signal (*,) and said digital signature fa) thereof according 

to said second encryption scheme (e m ) to produce encrypted data signal (c,); and 

signing said encrypted data signal according to a signature scheme of the voter 

(Vi). 

30 10. An electronic voting system comprising: 
a plurality of voter modules (10), and 
an admin server module (20), 

wherein a voter module (10) and the admin server module (20) cooperate in 
application of a fair blind signature scheme whereby to obtain a digital signature fa) of 
35 a data signal (*,) comprising the respective voter's vote (v f ). 
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11. A voter module (10) adapted to cooperate with an admin server module (20) in 
application of a fair blind signature scheme whereby to obtain a digital signature (y,) of 
a data signal (*,) comprising the voter's vote (v,). 

5 

12. A computer program having a set of instructions which, when in use on 
computer apparatus, adapt said computer apparatus so as to constitute a voter module 
(10) according to claim 11. 

10 13. A voting system admin server module (20) adapted to cooperate with a voter 
module (10) in application of a fair blind signature scheme whereby to obtain a digital 
signature (yi) of a data signal (*,) comprising the voter's vote (v f ). 

14. A computer program having a set of instructions which, when in use on 
15 computer apparatus, adapt said computer apparatus so as to constitute a voting 

system admin server module (20) according to claim 13. 

15. A voting system randomizer module (40) comprising: 

input means for receiving a batch of cast votes, each cast vote comprising an 
20 encrypted data signal (c,) comprising a respective voter's vote (v,) digitally signed 
according to a fair blind signature scheme, each encrypted data signal (c f ) being 
encrypted according to a predetermined encryption scheme {e m ); and 

a mix-net (M) for decrypting said * encrypted data signals (a) by applying a 
decryption scheme (Dm) inverse to said predetermined encryption scheme (e m ); and 
25 output means for outputting the decrypted signals of said batch in an order 

different from the order of the corresponding encrypted data signals in said batch. 

16. A computer program having a set of instructions which, when in use on 
computer apparatus, adapt said computer apparatus so as to constitute a voting 

30 system randomizer module (40) according to claim 15. 

17. A voting system tallier module (50) comprising: 

input means for receiving cast votes, each cast vote comprising a data signal 
(xi) digitally signed according to a fair blind signature scheme, each data signal (*,) 
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comprising a respective voter's vote (v/) encrypted according to an encryption scheme 
and 

a mix-net (m) for decrypting said encrypted votes (v,) by applying a decryption 
scheme inverse to said encryption scheme (E^). 

18. A computer program having a set of instructions which, when in use on 
computer apparatus, adapt said computer apparatus so as to constitute a voting 
system tallier module (50) according to claim 17. 



